Senior Information Security Analyst, UK

Overview

As Senior Information Security Analyst, you help safeguard Realty Income’s global IT environment by triaging alerts, investigating incidents, and tuning security tools. You will work within a centralized security function and collaborate across regions to standardize incident handling and improve detection. Your role supports regulatory compliance with frameworks like NIST CSF, GDPR and SOX while promoting a culture of security. This position suits a proactive professional seeking broader regional responsibility and impact in a growth-focused, multinational real estate company.

Pay / Benefits

• Healthcare, dental, and vision insurance
• 401(k) with company match
• PTO and 12 paid holidays
• Paid volunteer time
• Hybrid working arrangement
• Wellness and work-life benefits

Responsibilities

• Monitor, triage, and investigate alerts with the SOC and internal teams
• Analyze incidents, classify, document, and escalate as needed
• Manage daily information security tasks and ServiceNow incident workflows
• Support incident response with investigation, coordination, and documentation
• Participate in on-call rotations for after-hours incident handling
• Tune security tools (SIEM, endpoint protection) to reduce false positives
• Collaborate with technology teams to ensure logging and alerting across systems
• Assist IT, Operations, and development teams in vulnerability management within SLAs
• Engage with regional stakeholders to align security operations across time zones
• Support security awareness training and knowledge sharing
• Contribute to security process improvements and incident response playbooks
• Foster a security-conscious culture across the organization
• Perform other duties as assigned

Key requirements

• Experience in an Information Security role
• 4–8 years of relevant experience
• Cybersecurity certifications (CISSP, Sec+, CCSP, CEH) or equivalent
• Knowledge of NIST CSF, SOX ITGC, GDPR
• Hands-on with security tech: Microsoft Defender, Zscaler, SIEM (e.g. Google SecOps), identity platforms (Azure/Entra, Okta)
• Incident response, threat detection, vulnerability management in an enterprise
• Strong ability to analyze, prioritize, and respond to alerts in a business context
• Cloud security knowledge, especially Microsoft Azure
• Working knowledge of Active Directory, Microsoft 365, Windows OS
• Strong written and verbal communication for technical/non-technical stakeholders
• Commitment to continuous learning and staying current with threats
• Hybrid work schedule, on-site Mon–Thu, occasional travel; available outside hours for incidents

• Strong communication
• Collaborative mindset
• Problem solving and prioritization
• Microsoft Defender
• Zscaler
• SIEM platforms (Google SecOps)

…